I know one way to get a UDM search running on a schedule is to convert it into a YARA-L detection rule, which then runs automatically based on the rule's run frequency. But for use cases where I just want a plain search to run every morning (or every hour , etc) and get the results in an alert for example,Β is there a native option in the platform to do such a thing?
Question
Is there a native way to schedule a UDM search to run on shedule?
+6- Bronze 1
There isn't currently a native way to schedule a UDM Search itself. If you need native scheduling and alerting, the supported approach is a YARA-L detection rule with a configured run frequency. Otherwise, you'll need external automation using the UDM Search API to run the query on a schedule. But I believe that's the only way.Β π§ Β
+7- Bronze 2
There is currently no native way to schedule a plain UDM search. For alerts, the usual approach is to convert it into a YARA-L rule. If you need the raw search results on a schedule, you would need to use the UDM Search API with an external scheduler.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.